package com.vulnerable.thymeleaf;

import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RequestParam;

/**
 * @author jackliu  Email:
 * @description:
 * @Version
 * @create 2024-01-04 18:56
 */
@Controller("TestController1")
public class TestController {
    @GetMapping("/path")
    public String path(@RequestParam String lang) {
        return  lang ; //template path is tainted
    }
}
